Apache OpenWebBeans 1.0.0 and Artifactory 2.3 Released

Apache OpenWebBeans 1.0.0 is out now. Apache
OpenWebBeans is an implementation of JSR-299 and JRS-300. Version
1.0.0 implements the latest API, and passes the JSR-330 TCK and the
JSR-299 standalone TCK. It can be downloaded now.

Apache HTTP Server 2.2.17 Fixes Denial of Service
Attack

Version 2.2.17 of the Apache HTTP Server has
been announced. This is primarily a bug fix release, and a security
fix release of the APR-util 1.3.10 dependency. It fixes a denial of
service attack and two buffer over-read flaws in the bundled copy
of expat. A 2.0.64 legacy release is also available, which
addresses the same vulnerabilities.

The Pro release ships with a new License Control add-on for
controlling the licenses used by a project’s third-party
dependencies. It can offer immediate notifications about libraries
that violate your license policy, and can integrate with Maven,
Gradle and Ivy builds. Artifactory Pro can now be extended with
custom Groovy plugins, and users can delegate authentication
requests to a Crowd server and receive SSO in a Crowd-enabled SS
environment, with Atlassian Crowd Integration. A new API enables
creating, updating and deleting all repository types via REST. A
free
trial of Artifactory Pro 2.3 can be downloaded now. The
Artifactory OSS 2.3 is available from SourceForge – a direct
download link is listed at the announcement.

OSGi Extender Bundle for Creating JAX-RS
Apps

A new OSGi extender bundle that can be used to
declaratively create JAX-RS applications, is now available at
github. The extender bundle can dynamically deploy and undeploy
JAX-RS applications at runtime, with no OSGi or Jersey code
required. Application bundles are decoupled from OSGi and Jersey,
for potential use in a non-OSGi environment or with an alternative
JAX-RS implementation.